CVE-2020-0409

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-156997193

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 10, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-04105.5In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local informatiCVE-2020-04116.5In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote informaCVE-2020-04123.3In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclCVE-2020-04137.5In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remCVE-2020-04146.5In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions byCVE-2020-04155.5In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informationCVE-2020-04168.8In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation ofCVE-2020-04177.8In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This coulCVE-2020-04187.8In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution prCVE-2020-04195.5In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missingCVE-2020-04207.8In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to locCVE-2020-04217.8In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalatio
CVE-2020-0409: High severity, CVSS 7.8 | Vulnix